Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Xibo CMS Zip Slip RCE 漏洞利用工具 CVE-2023-33177 该漏洞利用工具演示了 Xibo CMS（CVE-2023-33177）中的路径遍历漏洞 ，该漏洞可通过恶意布局文件导入实现远程代码执行。 漏洞详情 CVE/公告： CVE-2023-33177 受影响版本： Xibo CMS 1.8.0 - 2.3.16 Xibo CMS 3.0.0 - 3.3.4 漏洞类型： 路径遍历（Zip Slip） 影响： 远程代码执行（RCE） 技术摘要 Xibo CMS 允许已认证用户通过 ZIP 压缩包导入布局文件。导入功能未能正确验证 mapping.json...

Exploit for Path Traversal in Xibosignage Xibo

Xibo CMS CVE-2023-33177 Vulnerability Tester !Python 3.6+...

CVE-2023-33177

Xibo is a content management system CMS. A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outside of the CMS library directory as the...